Fix result of Farbar Recovery Scan Tool (x64) Version:31-12-2015 Ran by [removed] (2016-01-04 00:09:23) Run:1 Running from C:\Users\[removed]\Desktop [removed] Boot Mode: Normal ============================================== fixlist content: ***************** HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe C:\Program Files (x86)\Mobogenie GroupPolicy: Restriction - Chrome <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.oursurfing.com/web/?type=ds&ts=1435354048&z=158b77330ce432b711f56a5gez2c5wdc0w8z5edzcm&from=dig2&uid=ST500LM012XHN-M500MBB_S2TUJ9HC700090&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.oursurfing.com/web/?type=ds&ts=1435354048&z=158b77330ce432b711f56a5gez2c5wdc0w8z5edzcm&from=dig2&uid=ST500LM012XHN-M500MBB_S2TUJ9HC700090&q={searchTerms} HKU\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=52B5083E8E22A2F8 SearchScopes: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=52B5083E8E22A2F8 SearchScopes: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001 -> {F0B09299-FC52-4C42-BC29-62C4F63D9E89} URL = hxxp://searchsimple-a.akamaihd.net/?affID=dg&q={searchTerms}&r=656 StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.oursurfing.com/?type=sc&ts=1435354048&z=158b77330ce432b711f56a5gez2c5wdc0w8z5edzcm&from=dig2&uid=ST500LM012XHN-M500MBB_S2TUJ9HC700090 CHR Extension: (Google Slides) - C:\Users\Steven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-06] [UpdateUrl: hxxps://mynamedomain.koko//0service/update2/crx] <==== ATTENTION CHR Extension: (Google Docs) - C:\Users\Steven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-06] [UpdateUrl: hxxps://mynamedomain.koko//0service/update2/crx] <==== ATTENTION CHR Extension: (Google Drive) - C:\Users\Steven\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-06] [UpdateUrl: hxxps://mynamedomain.koko//0service/update2/crx] <==== ATTENTION CHR Extension: (Google Sheets) - C:\Users\Steven\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-06] [UpdateUrl: hxxps://mynamedomain.koko//0service/update2/crx] <==== ATTENTION CHR Extension: (Chrome Web Store Payments) - C:\Users\Steven\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-06] [UpdateUrl: hxxps://mynamedomain.koko//0service/update2/crx] <==== ATTENTION CHR HKLM-x32\...\Chrome\Extension: [nbmafkdmkkckhggblphicnnhlgljnoje] - C:\Program Files (x86)\TornTV.com\torn2_10.crx S2 4dd8d474; "C:\WINDOWS\system32\rundll32.exe" "c:\Program Files (x86)\RelayDouble\RelayDouble.dll",serv c:\Program Files (x86)\RelayDouble R1 {027aeb7e-f8c3-4c10-be2c-627699fea100}Gw64; C:\Windows\System32\drivers\{027aeb7e-f8c3-4c10-be2c-627699fea100}Gw64.sys [48784 2015-07-10] (StdLib) R1 {2381c708-437b-40af-a3fc-1f3bd1d5172d}Gw64; C:\Windows\System32\drivers\{2381c708-437b-40af-a3fc-1f3bd1d5172d}Gw64.sys [48784 2015-07-23] (StdLib) R1 {241c48c5-f3a9-4ff5-98b0-c41988c34fff}Gw64; C:\Windows\System32\drivers\{241c48c5-f3a9-4ff5-98b0-c41988c34fff}Gw64.sys [48784 2015-06-26] (StdLib) R1 {4572b88f-b0f6-490d-ac1d-566e27c62495}Gw64; C:\Windows\System32\drivers\{4572b88f-b0f6-490d-ac1d-566e27c62495}Gw64.sys [48784 2015-06-29] (StdLib) R1 {7188dc29-5fcb-46e6-baeb-fbd8be71d343}Gw64; C:\Windows\System32\drivers\{7188dc29-5fcb-46e6-baeb-fbd8be71d343}Gw64.sys [48784 2015-07-14] (StdLib) R1 {972dc55c-c6c0-44f6-8b54-5599004975cf}Gw64; C:\Windows\System32\drivers\{972dc55c-c6c0-44f6-8b54-5599004975cf}Gw64.sys [48784 2015-07-17] (StdLib) R1 {9c8cca4c-20fb-4af3-ac83-4f7cb79e9eef}Gw64; C:\Windows\System32\drivers\{9c8cca4c-20fb-4af3-ac83-4f7cb79e9eef}Gw64.sys [48784 2015-07-04] (StdLib) R1 {a099f353-be27-4260-8532-0fab017d0e4f}Gw64; C:\Windows\System32\drivers\{a099f353-be27-4260-8532-0fab017d0e4f}Gw64.sys [48784 2015-07-08] (StdLib) R1 {d11195b7-3360-435c-8dba-aca103f9bec5}Gw64; C:\Windows\System32\drivers\{d11195b7-3360-435c-8dba-aca103f9bec5}Gw64.sys [48784 2015-07-01] (StdLib) R1 {e808f110-c3bd-4b41-9d1e-f200058e16fe}Gw64; C:\Windows\System32\drivers\{e808f110-c3bd-4b41-9d1e-f200058e16fe}Gw64.sys [48784 2015-07-22] (StdLib) R1 {eaa5c94d-f832-4066-99d2-177ee28f0634}Gw64; C:\Windows\System32\drivers\{eaa5c94d-f832-4066-99d2-177ee28f0634}Gw64.sys [48784 2015-07-27] (StdLib) C:\Windows\System32\drivers\{027aeb7e-f8c3-4c10-be2c-627699fea100}Gw64.sys C:\Windows\System32\drivers\{2381c708-437b-40af-a3fc-1f3bd1d5172d}Gw64.sys C:\Windows\System32\drivers\{241c48c5-f3a9-4ff5-98b0-c41988c34fff}Gw64.sys C:\Windows\System32\drivers\{4572b88f-b0f6-490d-ac1d-566e27c62495}Gw64.sys C:\Windows\System32\drivers\{7188dc29-5fcb-46e6-baeb-fbd8be71d343}Gw64.sys C:\Windows\System32\drivers\{972dc55c-c6c0-44f6-8b54-5599004975cf}Gw64.sys C:\Windows\System32\drivers\{9c8cca4c-20fb-4af3-ac83-4f7cb79e9eef}Gw64.sys C:\Windows\System32\drivers\{a099f353-be27-4260-8532-0fab017d0e4f}Gw64.sys C:\Windows\System32\drivers\{d11195b7-3360-435c-8dba-aca103f9bec5}Gw64.sys C:\Windows\System32\drivers\{e808f110-c3bd-4b41-9d1e-f200058e16fe}Gw64.sys C:\Windows\System32\drivers\{eaa5c94d-f832-4066-99d2-177ee28f0634}Gw64.sys 2015-12-31 12:31 - 2014-01-29 18:31 - 00001546 _____ C:\WINDOWS\Tasks\Torntv V6.0-updater.job 2015-12-31 12:31 - 2014-01-29 18:31 - 00001374 _____ C:\WINDOWS\Tasks\Torntv V6.0-enabler.job 2015-12-31 12:30 - 2014-01-29 18:30 - 00002458 _____ C:\WINDOWS\Tasks\Torntv V6.0-firefoxinstaller.job 2015-12-31 12:30 - 2014-01-29 18:30 - 00002202 _____ C:\WINDOWS\Tasks\Torntv V6.0-chromeinstaller.job 2015-12-31 12:30 - 2014-01-29 18:30 - 00001486 _____ C:\WINDOWS\Tasks\Torntv V6.0-codedownloader.job 2015-12-08 10:20 - 2013-03-04 23:34 - 00000000 ____D C:\Users\Steven\AppData\Roaming\uTorrent 2015-06-06 16:17 - 2015-08-12 22:58 - 0000024 _____ () C:\Users\Steven\AppData\Roaming\appdataFr25.bin 2013-04-09 19:42 - 2013-02-09 22:55 - 0114176 _____ () C:\Users\Steven\AppData\Roaming\BabMaint.exe 2013-09-15 19:03 - 2013-09-15 19:03 - 0000021 _____ () C:\Users\Steven\AppData\Roaming\my_intel.sys 2013-03-01 18:56 - 2015-12-31 09:24 - 0000380 _____ () C:\Users\Steven\AppData\Roaming\sp_data.sys Task: {036AC7E9-23A6-41A7-85DA-5BD7C4B95E77} - System32\Tasks\Torntv V6.0-firefoxinstaller => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-firefoxinstaller.exe <==== ATTENTION Task: {1EB59665-D07F-410D-8149-930DB709168C} - System32\Tasks\Torntv V6.0-codedownloader => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-codedownloader.exe <==== ATTENTION Task: {257E230E-40A4-4561-B721-1ED8C4A9EBDE} - System32\Tasks\FCBfan => C:\Users\Steven\AppData\Roaming\FCBfan\fcbfan.exe [2015-02-20] (FCB Update) <==== ATTENTION Task: {3A50AD4A-F92E-46C0-B7D6-DD057EDD5B0F} - System32\Tasks\Torntv V6.0-enabler => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-enabler.exe <==== ATTENTION Task: {4F3B2C10-CC57-422B-82ED-2011DD92BF58} - System32\Tasks\EPUpdater => C:\Users\Steven\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] () <==== ATTENTION Task: {523942F6-9D3D-475B-9313-65DE5E97B54E} - System32\Tasks\Super Optimizer Schedule => C:\Program Files (x86)\Super Optimizer\SupOptLauncher.exe <==== ATTENTION Task: {9D6F0393-B7F7-4460-A6DE-4CCB0CBFCDAF} - System32\Tasks\BitGuard => Sc.exe start BitGuard <==== ATTENTION Task: {A338827D-8122-46BB-8A12-32CA6F92C00F} - System32\Tasks\Torntv V6.0-chromeinstaller => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-chromeinstaller.exe <==== ATTENTION Task: {A5012DB8-C68E-49EF-9ED8-9C554B3CB1EE} - \AdobeFlashPlayerUpdate -> No File <==== ATTENTION Task: {A801AD36-E8F9-4C1F-888F-1B5CA87C1FB8} - System32\Tasks\Torntv V6.0-updater => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-updater.exe <==== ATTENTION Task: {CC769FD0-51C7-4028-B46C-D1D9C2E00FD3} - \AdobeFlashPlayerUpdate 2 -> No File <==== ATTENTION Task: C:\WINDOWS\Tasks\Superclean.job => c:\programdata\{ae31b6ce-000e-3fe2-ae31-1b6ce000db38}\hqghumeaylnlf.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\Torntv V6.0-chromeinstaller.job => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-chromeinstaller.exe?/installcrx /agentregpath='Torntv V6.0' /extensionfilepath C:\Program Files (x86)\Torntv V6.0\45960.crx' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=232F7282236C4B42BD7521B2ED4F63CCIE /verifier=c5d04a89191c42209dbc163d753fc6f7 /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1391016600 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=ahmilhmcinpmpohfoiccaplbhgelbnim /extensionversion=1.26.71 /extensionpublickey=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7jTNxL7h3FB/7RViD415XIgSs8u7OpVFlyS3MJgMtHVkPLpmLyt0lr1jUfjaFytjaPQSJYipB9zgxntsyN9pMFhVI3YuKm2jfCfBc0asZ2Ys4AhxagcKp/y0Ofkp8Rb4xe+gD4tDbDo436Q8GyehUWSHyrPtB4lODcQxHVZ+EzQIDAQAB /defbro=ch /allusers /allprofiles /autoupdateulr='hxxp:/update.srvstatsdata.com/ch_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION Task: C:\WINDOWS\Tasks\Torntv V6.0-codedownloader.job => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-codedownloader.exe?/reinstallapp /runfrom=task /agentregpath='Torntv V6.0' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=232F7282236C4B42BD7521B2ED4F63CCIE /verifier=c5d04a89191c42209dbc163d753fc6f7 /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1391016600 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /codedownloaddomain=hxxp:/cr.install-daddy.com /defbro=ch /allusers /autoupdateulr='hxxp:/update.srvstatsdata.com/ie_code_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION Task: C:\WINDOWS\Tasks\Torntv V6.0-enabler.job => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-enabler.exe?/enablebho /agentregpath='Torntv V6.0' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=232F7282236C4B42BD7521B2ED4F63CCIE /verifier=c5d04a89191c42209dbc163d753fc6f7 /installerversion=1_34_1_21 /installationtime=1391016600 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /bhoguid=11111111-1111-1111-1111-110411591160 /defbro=ch /allusers /autoupdateulr='hxxp:/update.srvstatsdata.com/ie_enable_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION Task: C:\WINDOWS\Tasks\Torntv V6.0-firefoxinstaller.job => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-firefoxinstaller.exe?/installxpi /agentregpath='Torntv V6.0' /extensionfilepath C:\Program Files (x86)\Torntv V6.0\45960.xpi' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=232F7282236C4B42BD7521B2ED4F63CCIE /verifier=c5d04a89191c42209dbc163d753fc6f7 /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1391016600 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=[removed] /extensionversion=0.93 /prefsbranch=ae2fd07a6e2824f2e896585565fcb6384b69158e63c3b476c9d98ae5838c5b707com45960 /updateurl=hxxps:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/45960.rdf /extensionname='Torntv V6.0' /extensiondesc='The must-have App extensions for Television fans! Watch free TV channels, live sports and more' /publishername='installdaddy' /defbro=ch /allusers /allprofiles /checkfflist /autoupdateulr='hxxp:/update.srvstatsdata.com/ff_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION Task: C:\WINDOWS\Tasks\Torntv V6.0-updater.job => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-updater.exe?/runupdater /agentregpath='Torntv V6.0' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=232F7282236C4B42BD7521B2ED4F63CCIE /verifier=c5d04a89191c42209dbc163d753fc6f7 /installerversion=1_34_1_21 /installationtime=1391016600 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /geoserviceurl=hxxp:/ipgeoapi.com/ /updatejsondomain=hxxp:/update.srvstatsdata.com /updaterversion=2 /monetizationdomain=hxxp:/stats.syncstatsdata.com /autoupdateulr='hxxp:/update.srvstatsdata.com/updater_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION Reg: reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1339.144" /v "chrome homepages" /f Reg: reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1519.190" /v "chrome homepages" /f Reg: reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1673.238" /v "chrome homepages" /f Reg: reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1694.246" /v "chrome homepages" /f Reg: reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.7.1769.27" /v "chrome homepages" /f Reg: reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.7.1832.68" /v "chrome homepages" /f Reg: reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store" /v "C:\Program Files (x86)\DNS Unlocker\unins000.exe" /f [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\DataMngr] [-HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\DataMngr] [-HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Trolltech] [-HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QSqlDriverFactoryInterface:] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Babylon] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}] [-HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\BabylonToolbar] [-HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com] [-HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Conduit] EmptyTemp: Hosts: Cmd: ipconfig /flushdns ***************** HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mobilegeni daemon => value not found. "C:\Program Files (x86)\Mobogenie" => not found. C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully "HKLM\SOFTWARE\Policies\Google" => key removed successfully "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKU\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Microsoft\Internet Explorer\Main\\bProtector Start Page => value not found. HKU\S-1-5-21-2357267511-2638639882-2966789438-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => key not found. HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => key not found. "HKU\S-1-5-21-2357267511-2638639882-2966789438-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F0B09299-FC52-4C42-BC29-62C4F63D9E89}" => key removed successfully HKCR\CLSID\{F0B09299-FC52-4C42-BC29-62C4F63D9E89} => key not found. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => value restored successfully C:\Users\Steven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek <==== ATTENTION => not found C:\Users\Steven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake <==== ATTENTION => not found C:\Users\Steven\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf <==== ATTENTION => not found C:\Users\Steven\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap <==== ATTENTION => not found C:\Users\Steven\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda <==== ATTENTION => not found "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nbmafkdmkkckhggblphicnnhlgljnoje" => key removed successfully 4dd8d474 => service removed successfully "c:\Program Files (x86)\RelayDouble" => not found. {027aeb7e-f8c3-4c10-be2c-627699fea100}Gw64 => service removed successfully {2381c708-437b-40af-a3fc-1f3bd1d5172d}Gw64 => service removed successfully {241c48c5-f3a9-4ff5-98b0-c41988c34fff}Gw64 => service removed successfully {4572b88f-b0f6-490d-ac1d-566e27c62495}Gw64 => service removed successfully {7188dc29-5fcb-46e6-baeb-fbd8be71d343}Gw64 => service removed successfully {972dc55c-c6c0-44f6-8b54-5599004975cf}Gw64 => service removed successfully {9c8cca4c-20fb-4af3-ac83-4f7cb79e9eef}Gw64 => service removed successfully {a099f353-be27-4260-8532-0fab017d0e4f}Gw64 => service removed successfully {d11195b7-3360-435c-8dba-aca103f9bec5}Gw64 => service removed successfully {e808f110-c3bd-4b41-9d1e-f200058e16fe}Gw64 => service removed successfully {eaa5c94d-f832-4066-99d2-177ee28f0634}Gw64 => service removed successfully "C:\Windows\System32\drivers\{027aeb7e-f8c3-4c10-be2c-627699fea100}Gw64.sys" => not found. "C:\Windows\System32\drivers\{2381c708-437b-40af-a3fc-1f3bd1d5172d}Gw64.sys" => not found. "C:\Windows\System32\drivers\{241c48c5-f3a9-4ff5-98b0-c41988c34fff}Gw64.sys" => not found. "C:\Windows\System32\drivers\{4572b88f-b0f6-490d-ac1d-566e27c62495}Gw64.sys" => not found. "C:\Windows\System32\drivers\{7188dc29-5fcb-46e6-baeb-fbd8be71d343}Gw64.sys" => not found. "C:\Windows\System32\drivers\{972dc55c-c6c0-44f6-8b54-5599004975cf}Gw64.sys" => not found. "C:\Windows\System32\drivers\{9c8cca4c-20fb-4af3-ac83-4f7cb79e9eef}Gw64.sys" => not found. "C:\Windows\System32\drivers\{a099f353-be27-4260-8532-0fab017d0e4f}Gw64.sys" => not found. "C:\Windows\System32\drivers\{d11195b7-3360-435c-8dba-aca103f9bec5}Gw64.sys" => not found. "C:\Windows\System32\drivers\{e808f110-c3bd-4b41-9d1e-f200058e16fe}Gw64.sys" => not found. "C:\Windows\System32\drivers\{eaa5c94d-f832-4066-99d2-177ee28f0634}Gw64.sys" => not found. "C:\WINDOWS\Tasks\Torntv V6.0-updater.job" => not found. "C:\WINDOWS\Tasks\Torntv V6.0-enabler.job" => not found. "C:\WINDOWS\Tasks\Torntv V6.0-firefoxinstaller.job" => not found. "C:\WINDOWS\Tasks\Torntv V6.0-chromeinstaller.job" => not found. "C:\WINDOWS\Tasks\Torntv V6.0-codedownloader.job" => not found. C:\Users\Steven\AppData\Roaming\uTorrent => moved successfully C:\Users\Steven\AppData\Roaming\appdataFr25.bin => moved successfully "C:\Users\Steven\AppData\Roaming\BabMaint.exe" => not found. C:\Users\Steven\AppData\Roaming\my_intel.sys => moved successfully C:\Users\Steven\AppData\Roaming\sp_data.sys => moved successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{036AC7E9-23A6-41A7-85DA-5BD7C4B95E77} => key not found. C:\WINDOWS\System32\Tasks\Torntv V6.0-firefoxinstaller => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V6.0-firefoxinstaller => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EB59665-D07F-410D-8149-930DB709168C} => key not found. C:\WINDOWS\System32\Tasks\Torntv V6.0-codedownloader => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V6.0-codedownloader => key not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{257E230E-40A4-4561-B721-1ED8C4A9EBDE}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{257E230E-40A4-4561-B721-1ED8C4A9EBDE}" => key removed successfully C:\WINDOWS\System32\Tasks\FCBfan => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FCBfan" => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3A50AD4A-F92E-46C0-B7D6-DD057EDD5B0F} => key not found. C:\WINDOWS\System32\Tasks\Torntv V6.0-enabler => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V6.0-enabler => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4F3B2C10-CC57-422B-82ED-2011DD92BF58} => key not found. C:\WINDOWS\System32\Tasks\EPUpdater => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EPUpdater => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{523942F6-9D3D-475B-9313-65DE5E97B54E} => key not found. C:\WINDOWS\System32\Tasks\Super Optimizer Schedule => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Super Optimizer Schedule => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9D6F0393-B7F7-4460-A6DE-4CCB0CBFCDAF} => key not found. C:\WINDOWS\System32\Tasks\BitGuard => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BitGuard => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A338827D-8122-46BB-8A12-32CA6F92C00F} => key not found. C:\WINDOWS\System32\Tasks\Torntv V6.0-chromeinstaller => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V6.0-chromeinstaller => key not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A5012DB8-C68E-49EF-9ED8-9C554B3CB1EE}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A5012DB8-C68E-49EF-9ED8-9C554B3CB1EE}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AdobeFlashPlayerUpdate" => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A801AD36-E8F9-4C1F-888F-1B5CA87C1FB8} => key not found. C:\WINDOWS\System32\Tasks\Torntv V6.0-updater => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V6.0-updater => key not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{CC769FD0-51C7-4028-B46C-D1D9C2E00FD3}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CC769FD0-51C7-4028-B46C-D1D9C2E00FD3}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AdobeFlashPlayerUpdate 2" => key removed successfully C:\WINDOWS\Tasks\Superclean.job => not found. C:\WINDOWS\Tasks\Torntv V6.0-chromeinstaller.job => not found. C:\WINDOWS\Tasks\Torntv V6.0-codedownloader.job => not found. C:\WINDOWS\Tasks\Torntv V6.0-enabler.job => not found. C:\WINDOWS\Tasks\Torntv V6.0-firefoxinstaller.job => not found. C:\WINDOWS\Tasks\Torntv V6.0-updater.job => not found. ========= reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1339.144" /v "chrome homepages" /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1519.190" /v "chrome homepages" /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1673.238" /v "chrome homepages" /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.6.1694.246" /v "chrome homepages" /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.7.1769.27" /v "chrome homepages" /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\5e48cdcbc3dec47\2.7.1832.68" /v "chrome homepages" /f ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= reg delete "HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store" /v "C:\Program Files (x86)\DNS Unlocker\unins000.exe" /f ========= The operation completed successfully. ========= End of Reg: ========= HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\DataMngr => key not found. HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\DataMngr => key not found. HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Trolltech => could not remove at first attempt (ErrorCode: C0000121), see next line. HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Trolltech => key removed successfully HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QSqlDriverFactoryInterface: => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Babylon => key not found. HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} => key removed successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} => key removed successfully HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\BabylonToolbar => key not found. HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com => key not found. HKEY_USERS\S-1-5-21-2357267511-2638639882-2966789438-1001\Software\Conduit => key not found. C:\Windows\System32\Drivers\etc\hosts => moved successfully Hosts restored successfully. ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= End of CMD: ========= EmptyTemp: => 12.2 GB temporary data Removed. The system needed a reboot. ==== End of Fixlog 00:15:16 ====